Privacy Policy

Last updated: 3 August 2025

1. Introduction

Commerce Media Directory ("we," "us," or "our") operates the commercemedia.directory website (the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We are committed to protecting your privacy and ensuring you have control over your personal information. This policy complies with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

2. Data Controller

For the purpose of UK GDPR, the data controller is Commerce Media Directory. You can contact us via LinkedIn at https://www.linkedin.com/in/peterduffy/

3. Information We Collect

3.1 Information You Provide

We may collect the following information when you interact with our Service:

  • Network submission information (company details, contact information, network descriptions)
  • Feedback and correspondence when you contact us
  • Any other information you choose to provide

3.2 Information Automatically Collected

When you visit our Service, we may automatically collect:

  • Usage data (pages visited, time spent, click patterns)
  • Device information (IP address, browser type, operating system)
  • Cookies and similar tracking technologies (see our Cookie Policy for details)

4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Legitimate Interests: To operate and improve our Service, analyze usage patterns, and provide relevant content
  • Consent: For cookies and analytics where required (you can withdraw consent at any time)
  • Contract Performance: To respond to your submissions and inquiries
  • Legal Obligation: To comply with applicable laws and regulations

5. How We Use Your Information

We use the collected information for the following purposes:

  • To provide and maintain our Service
  • To process and review network submissions
  • To respond to your inquiries and provide customer support
  • To analyze and improve our Service performance
  • To detect, prevent, and address technical issues and security vulnerabilities
  • To comply with legal obligations

6. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

  • Service Providers: We may share information with trusted third-party service providers who assist in operating our website (e.g., hosting, analytics)
  • Legal Requirements: We may disclose information when required by law or to protect our rights, property, or safety
  • Business Transfers: In the event of a merger, acquisition, or sale of assets
  • With Your Consent: We may share information with your explicit consent

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically:

  • Network submission data: Retained until published or permanently declined
  • Analytics data: Retained for up to 26 months
  • Contact inquiries: Retained for up to 2 years for reference purposes

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: Request limitation of processing in certain situations
  • Right to Data Portability: Request transfer of your data to another service provider
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, please contact us via LinkedIn. We will respond to your request within one month.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our use of cookies, including how to manage your preferences, please see our Cookie Policy.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

11. International Data Transfers

Our Service may use third-party service providers located outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

  • Adequacy decisions by the UK government
  • Standard contractual clauses approved by the UK authorities
  • Other appropriate safeguards as required by UK GDPR

12. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us so we can take appropriate action.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us via LinkedIn at https://www.linkedin.com/in/peterduffy/

15. Supervisory Authority

If you believe we have not handled your personal data in accordance with this Privacy Policy or applicable data protection laws, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters:

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Tel: 0303 123 1113

Website: ico.org.uk